Release date:
2026-10-28 09:56:35 UTC
Description:
- CVE-2026-42959: use the correct counter when collecting ADDITIONAL rrsets for validation
- CVE-2026-42960: only mark in-bailiwick NS glue in the authority section as glue
- CVE-2026-81634: count the owner name in the canonical rrset size check
- CVE-2026-81642: check buffer bounds when canonicalizing rdata for signature verification
- CVE-2026-40622: limit the TTL of a higher-trust NS rrset replacing a cached delegation (ghost domain)
- CVE-2026-82717: harden pkt_dname_len() and rdata_copy() against inconsistent name walks
Updated packages:
-
unbound-1.4.20-29.el6_10.1.tuxcare.els2.i686.rpm
sha:987051ce09c7a5dd0e02477b77173e0df995340b55f7508a27ad74d4649f988c
-
unbound-1.4.20-29.el6_10.1.tuxcare.els2.x86_64.rpm
sha:c8099823cac15ed3ae13f1ab81484acd264f168525076d1e7b5d424da6a82ea1
-
unbound-devel-1.4.20-29.el6_10.1.tuxcare.els2.i686.rpm
sha:4d46111d4179ed74d0f124aad9d872fb019c43e341fa61125dab76e11304489a
-
unbound-devel-1.4.20-29.el6_10.1.tuxcare.els2.x86_64.rpm
sha:bdc884f624efcb79ca015d273b43f22fc85b3a78a51b06c277c8d0d1649ef977
-
unbound-libs-1.4.20-29.el6_10.1.tuxcare.els2.i686.rpm
sha:fb7f2aa834a0473142e1b6862a824871d5206b24356ef1dd3d7680b3e5834963
-
unbound-libs-1.4.20-29.el6_10.1.tuxcare.els2.x86_64.rpm
sha:7d03fb414453f6ec107179d4de68bb3f8db18743a133c76e00bf04234c06ba3a
-
unbound-python-1.4.20-29.el6_10.1.tuxcare.els2.i686.rpm
sha:4b8605d079d9201a2ed87d0261d18c4299a115da92df2d4f7f0e5f16e87785aa
-
unbound-python-1.4.20-29.el6_10.1.tuxcare.els2.x86_64.rpm
sha:3cc1515f248443392dcd55eed1262977d9bc17af66dd5a849f8516f809f4deed
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
